FCP - FortiMail 7.4 Administrator Practice Test

Skills this practice test covers

• Trace a message through SMTP, MX record lookup and FortiMail to a protected domain.
• Configure SMTP authentication, LDAP lookups and secure MTA features on FortiMail.
• Order access control rules, IP policies and recipient policies so each message matches the right one.
• Block spam and malware with session profiles, greylisting, FortiGuard Antispam and FortiSandbox.
• Protect mail in transit with SMTPS or SMTP over TLS, and send IBE-encrypted mail to outside recipients.
• Run FortiMail in gateway, transparent or server mode, alone or in an HA cluster.

5 domains · 48 topics · 210 of 214 questions sorted by domain

Requirements

• No formal prerequisites: anyone can book the exam.
• Recommended: the FortiGate administrator topics, as in Fortinet NSE 4 - FortiOS 7.6 Administrator, or the same experience.
• Recommended: at least six months of hands-on FortiMail work, with three years in networking and one in network security.
• Recommended: familiarity with SMTP, PKI, SSL/TLS and LDAP.

About the FCP-FML-AD-7-4 exam

How to earn the certification

Earns

FCP - FortiMail 7.4 Administrator exam badgeProfessional

Before

• NSE4_FGT_AD-7.6 Fortinet NSE 4 - FortiOS 7.6 Administrator

  Fortinet's FortiMail course expects the FortiGate administrator topics, which this exam covers.

How to prepare for FCP-FML-AD-7-4

1. 1

   Draw the mail flow before configuring

   Sketch how a message travels from the sending MTA through DNS and FortiMail to the mail server. Mark where session checks, antispam, antivirus and content rules act on it.

2. 2

   Run FortiMail in two modes

   Deploy a FortiMail VM in gateway mode with one protected domain and an LDAP server. Then rebuild it in transparent mode and note what changes in routing and policies.

3. 3

   Switch on one filter at a time

   Email Security has the most practice questions. Enable greylisting, deep header inspection and Bayesian filtering one by one, and read the log entry each one leaves.

4. 4

   Send encrypted mail both ways

   Send one IBE message by push delivery and one by pull delivery, then compare what the recipient sees. Add SMTP over TLS between two servers as well.

5. 5

   Close with timed mixed practice

   Take the FCP-FML-AD-7-4 practice test in Timed Mode. For each miss, ask Brainy AI Assistant to trace the message through FortiMail's checks in order.

   Start a timed FCP-FML-AD-7-4run

Fortinet recommends the FortiMail 7.4 Administrator course with its hands-on labs, together with the FortiMail 7.4 Administration Guide.

Who FCP-FML-AD-7-4 is for

• Email security administrators who look after FortiMail units day to day.
• Network security engineers who add email protection to a Fortinet network.
• Administrators who move an organization's mail flow onto FortiMail.

Typical job titles: Email security administrator · Network security engineer · Messaging administrator · Security engineer · Systems administrator

FCP-FML-AD-7-4 glossary

18 terms from the exam objectives and the vendor's official material, each defined in a sentence.

Active-passive HA

A cluster in which one FortiMail unit handles mail while the other keeps a synchronized copy and takes over if the first one fails.

Bounce Address Tag Validation (BATV)

A method that tags the return address of outgoing mail, so FortiMail can reject bounces for mail it never sent.

Data loss prevention (DLP)

Rules that find sensitive data, such as card numbers, in outgoing mail and then block or quarantine the message.

Deep header inspection

An antispam check that reads a message's Received headers to find the real source of the mail, even behind relays.

DKIM signing

Adding a signature to outgoing mail with the domain's private key, so receiving servers can check it against the public key in DNS.

FortiGuard Antispam

Fortinet's cloud service that rates IP addresses, URLs and messages, so FortiMail can block known spam.

FortiSandbox

Fortinet's sandbox product. FortiMail sends it suspicious files and URLs to find threats that signatures miss.

Gateway mode

The operation mode in which FortiMail sits in front of the mail server, receives mail through the MX record and relays it after scanning.

Greylisting

An antispam method that turns away the first delivery attempt from an unknown sender, because real mail servers retry and many spam senders do not.

Identity-based encryption (IBE)

FortiMail's encryption for mail to outside recipients, who register with FortiMail to read it and need no certificates of their own.

LDAP integration

Connecting FortiMail to a directory, such as Active Directory, to verify users, groups and recipient addresses.

Opportunistic TLS

Using TLS for an SMTP session whenever the other server supports it, and sending in plain text when it does not.

Protected domains

The email domains that FortiMail accepts and scans mail for, usually the organization's own domains.

Pull delivery method

IBE delivery in which the message stays on FortiMail and the recipient reads it in the secure web portal.

Push delivery method

IBE delivery in which the recipient receives the encrypted message as an attachment and opens it after logging in to FortiMail.

Server mode

The operation mode in which FortiMail is the mail server itself, with user mailboxes, webmail and POP3 and IMAP access.

Session profiles

Settings that check a connection and its SMTP commands, such as sender reputation and rate limits, before a message is accepted.

Transparent mode

The operation mode in which FortiMail scans mail in the network path without being visible, so IP addresses and MX records stay as they are.